Impossible to turn off captcha in registration

[undercash]

I m having an even worst issue.
I select "none" in user options for captcha, but after opening a login form in the frontend, it comes back automatically to "captcha" in the user option, without me selecting anything, even after setting the captcha to none in global config.

I really don't understand that one, but as result, since the captcha form is not showing at all in the login form and I can't disable it, no registration are possible

[AMurray]

I can't discern if you're trying to implement ReCaptcha or trying to disable it. If you have set it to "none" in global config but are still seeing it, clear your browser cache and Joomla cache (and if using any other form of caching or CDN etc, clear those too). Also you could try disabling the ReCaptcha plugins if you're not using them at all. Test in multiple browsers.

You don't need captcha in a login form. If you want additional security for the login, use Two-factor Authentication (built-in to Joomla).

[undercash]

actually I m trying to disable it since I mentioned I switched it off in the user login options , as it doesn't appear in the module form I m using for some reasons.
Also I put "none" in global configuration file but it keeps complaining about it

[undercash]

So I disable it, I open the login module , it works only once to register, and then the users options show again the captcha I just removed.

[Webdongle]

Template override is the most likely cause.

[undercash]

I have looked at the template custom override but I don' t have any module related to the login in there.

[undercash]

actually finally I could see the recaptcha below the form, but only when clicking on the forgot password link.
I didn't say explicitly but I m not talking about the standard joomla login module or urls, but the improved ajax login component.
The captcha display normally within joomla or jomsocial for example.
But that third party component doesn't has any settings for recaptcha, I assume it just uses what we setup in the users options or in the global configuration.

[toivo]

Mod note: moved to 3.x Extensions

[undercash]

so? i m still running joomla! 3

[toivo]

...but you said the issue occurs when using a third party extension:

I m not talking about the standard joomla login module or urls, but the improved ajax login component.

Is it this paid extension: Improved AJAX Login & Register? According to the JED information, this extension was last updated almost four years ago. Therefore this extension may not be compatible with PHP 8.0 and later.

Which version of Joomla 3.x and PHP does this website use?

[undercash]

I m running php 7.3 with j!3.10.5

[undercash]

I ll do a clean install (my site is 8yo..) and see if it works.. pretty sure it will. but too complicated to debug

[AMurray]

Maybe updating to the latest 3.10.11 may help, you're a few releases behind (3.10.5).

You're also using obsolete PHP - v7.3/v7.4 are at EOL.

For 3.10 it's recommended to use PHP 8.0, providing all your extensions work (and maybe it's a good time to review all those, and bring them all up to date if as you say, the site is 8 years old).

[undercash]

"PHP 8 was released in November 2020, and as of May 2022, only about 3% of PHP-based websites currently use it! "

interesting

[Webdongle]

"PHP 8 was released in November 2020, and as of May 2022, only about 3% of PHP-based websites currently use it! "
...

According to https://w3techs.com/technologies/details/pl-php/7 it's only 6.1%.
And only 18.1% use the version of php that you use

Perhaps we will see you in the security board soon asking how to clean a hacked site?

[undercash]

Yep, it will increase slowly but surely. The rule is always the same, upgrading slowly as most extensions anyway won't work on this php8. as you said, my login hasn't been updated since 2018..
I have 5 ubuntu servers and all of them still receives security updates for php7.x

[Webdongle]

Yep, it will increase slowly but surely. ...

Nope. The % of sites using the version of php will decrease.

...
I have 5 ubuntu servers and all of them still receives security updates for php7.x

Security updates for php7.3 ended last year https://www.php.net/supported-versions.php
On top of that your Joomla version is old.

I will watch for your posts in the security board when you ask how to clean a hacked site. But then your site might not be significant enough for the hackers to attack.

[undercash]

oh yea, it's probably the explanation for this issue I m facing: the site is too old, (like what 10 months old), my php is too old (but still used by 95% of the world sites..) hmm
Hacked? my joomla has never been hacked, but my servers got some pishing long time ago, true. I got something like 110 millions pageviews in 7 years. so yea, it's a small site but not something totally invisible.

[Webdongle]

...the site is too old, (like what 10 months old), my php is too old (but still used by 95% of the world sites..)...

Nope. php 7.3 only 18.1%

... I got something like 110 millions pageviews in 7 years. ...

How many were spiders? And how many of the non spider hits read the whole page?

[undercash]

Well when you ll upload 260tb per month (check before with your hosting provider if that's ok) then you ll understand that those aren't bots or spider or whatever..

And this is the end of this "discussion" as I can feel it's not going anywhere